Episode 128: Customer and Media Communications

Sometimes the most difficult part of a security incident isn’t stopping the threat—it’s explaining what happened to the people affected. In this episode, we explore how organizations communicate with customers, partners, and the media during and after an incident. You’ll learn what kinds of disclosures are required, what language builds trust, and how to balance transparency with prudence.

We’ll also discuss examples of strong vs. poor communication, the role of coordination with compliance and marketing, and how to provide updates without spreading confusion. While you may not be writing these press releases yourself, understanding how your technical findings support accurate messaging is key. This episode sharpens your awareness of what happens when security goes public—and how to support that process responsibly. Brought to you by BareMetalCyber.com